home

AnVir.exe

AnVir Task Manager Free

Ilya Kheifets

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘AnVir Task Manager Free’.
Publisher:
AnVir Software  (signed by Ilya Kheifets)

Product:
AnVir Task Manager Free

Version:
5.6.0.0

MD5:
9af5d436a33cd5a011a1a45c03f14585

SHA-1:
db25066f839a64005abd132488b193ec8d3bd1ab

SHA-256:
8afebafe86ee00e0bde2f472ab552659baa2e3735f8919369e2b2c78363e67b7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:51:34 AM UTC  (today)

File size:
1.5 MB (1,571,040 bytes)

Product version:
5.6.0.0

Copyright:
Copyright (c) 2000-2009. AnVir Software

Trademarks:
AnVir Task Manager Free

Original file name:
AnVir.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\anvir\anvir.exe

Digital Signature
Signed by:
Ilya Kheifets

Authority:
The USERTRUST Network

Valid from:
9/11/2008 3:00:00 AM

Valid to:
9/12/2011 2:59:59 AM

Subject:
CN=Ilya Kheifets, O=Ilya Kheifets, STREET="Altayskaya, 29", L=Moscow, S=-, PostalCode=107589, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00C2E4DD6035D0C7DCAE689D0526EFF2C7

File PE Metadata
Compilation timestamp:
5/15/2009 9:44:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:ETnmyiEDo32YFMU9NBnz5m7C8+G993BYs+sYW+2P4ixi+kmbW19kKGV:OmNEDw2pq/tG993BYs+sYW+2P4iBPyq

Entry address:
0x1000

Entry point:
68, 01, 60, 61, 00, E8, 01, 00, 00, 00, C3, C3, BE, E6, D6, 4E, 08, DA, 75, 2F, DA, 22, 4C, 7E, 43, 29, DC, E3, 21, 53, 61, 13, FE, 80, 11, 82, 38, DD, 3E, 50, C0, D7, C3, 63, 18, 76, B9, 4F, 69, A9, 7B, 97, 08, 17, B9, 96, 72, 64, AF, 6D, BE, AF, F4, 47, 3D, 06, 3E, EE, 97, DA, 3F, 33, C7, 32, B4, 79, EA, 1D, C1, 91, 46, CF, EE, 01, A4, 45, 81, 0F, 37, FE, 43, DC, A0, C5, B7, 3C, 32, 1D, 95, 79, C5, 55, 73, B6, D7, E4, 4E, 56, 82, A2, 8B, BA, 11, DB, D0, D4, 24, 54, 34, 08, 23, 45, 43, 1B, F2, 12, A5, 34...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
696 KB (712,704 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AnVir Task Manager Free

Command:
"C:\Program Files\anvir\anvir.exe" minimized


Scan AnVir.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.